China DOS Union

Originally posted by 002500 at 2006-10-16 01:09:
It's strange that using a batch script to close explorer didn't succeed but the shutdown interface popped up?

C:\>taskkill /im explorer.exe
SUCCESS: The process "explorer.exe" with PID 7864 has been terminated. ...

　　Hehe, it's not a virus. Try this command and the shutdown dialog won't appear:

taskkill /im explorer.exe /f

[ Last edited by lxmxn on 2006-10-17 at 03:58 ]

楼主请听我说

Explorer.exe is the foreground process of the system.

In the case of abnormal termination, for example, using the following form:
ntsd -c q -pn explorer.exe

The system will consider this as an unexpected operation and automatically restart Explor.exe. So the next sentence of the owner,
c:\windows\explorer.exe
will be executed when Explorer has been restarted, that is, opening the Windows Explorer.

If you want to end this process without automatic recovery, one way is to force kill the process in the Windows built-in Task Manager. The scripted method has not been discovered yet, leaving it for the experts to continue exploring.